Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft
File: 2f-H9S43t2bsv0s_nLJlWN0wiCA.mft (raw, json)
Hash identifier: RUgjs9qNx/5lY0JkPg7P2VJQb0JJLcKe8gtAQIoOLw8=
Subject key identifier: B8:F0:7B:78:CF:37:AD:AC:48:E7:03:2B:64:3F:B9:B8:5A:A6:78:11
Authority key identifier: D9:FF:87:F5:2E:37:B7:66:EC:BF:4B:3F:9C:B2:65:58:DD:30:88:20
Certificate issuer: /CN=d9ff87f52e37b766ecbf4b3f9cb26558dd308820
Certificate serial: 0194BCE0BCBEC575C4EFB85883B67C59BAEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f-H9S43t2bsv0s_nLJlWN0wiCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft
Manifest number: 09F9
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: 2f-H9S43t2bsv0s_nLJlWN0wiCA.crl (hash: PncUuZuzrm3DQXZj/5A2pIuSkgl5PvKVnKqKEu4gbL4=)
2: nyss7FejNtDGTUXRBz8EpK-bUtQ.roa (hash: 1YbJTbv2jhWedSFo8tfV4w9Efzyk/as9DY0FQwn+kas=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:bc:be:c5:75:c4:ef:b8:58:83:b6:7c:59:ba:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff87f52e37b766ecbf4b3f9cb26558dd308820
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=b8f07b78cf37adac48e7032b643fb9b85aa67811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:67:e2:46:db:a7:e4:78:b5:a6:08:00:e5:
bc:97:a5:0f:1a:a0:f4:d5:a4:a6:c9:67:12:ee:9c:
06:05:40:c8:56:e3:8d:84:12:1a:1f:13:9c:88:43:
fb:b5:e1:e1:8d:6f:1e:22:25:88:7d:18:bd:eb:1e:
bb:b6:d6:39:f3:00:c9:a8:ec:50:d5:3b:6f:6b:51:
77:33:ac:96:a5:96:ac:a7:7a:73:32:83:71:81:47:
0d:37:59:41:d6:93:f4:89:e1:d3:bd:fb:78:5a:f5:
32:3a:b3:7d:8e:54:10:8a:cb:c2:3f:ef:93:74:20:
7c:00:5e:8c:5b:5f:b2:b0:76:00:a0:4a:91:4f:04:
e8:ca:e7:58:f4:71:96:af:4f:69:26:f4:3c:18:a5:
e1:b1:5f:f7:f3:2a:05:18:f8:f2:c2:fc:ff:48:52:
c2:45:d4:85:0c:2f:18:a6:67:3a:8b:ea:e8:95:9f:
a8:c1:c8:3b:8e:a8:45:a8:33:ea:48:2b:35:cf:b5:
88:cf:23:27:09:7b:43:a2:bf:a9:f1:1b:e9:c3:e0:
80:60:0c:e5:09:10:1a:c6:9f:e6:30:75:83:0b:8c:
21:df:1f:67:3a:1d:3d:74:f6:e7:1c:36:29:96:08:
35:5b:d6:c2:03:ca:c7:95:22:8f:18:1e:90:5b:24:
c0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F0:7B:78:CF:37:AD:AC:48:E7:03:2B:64:3F:B9:B8:5A:A6:78:11
X509v3 Authority Key Identifier:
keyid:D9:FF:87:F5:2E:37:B7:66:EC:BF:4B:3F:9C:B2:65:58:DD:30:88:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-H9S43t2bsv0s_nLJlWN0wiCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ab:01:5a:14:86:ec:7a:db:77:f0:6b:6a:1a:a9:bb:fa:17:
6b:ae:d5:e0:0e:d5:a3:c6:c8:c7:7c:ed:95:82:3d:8e:63:1b:
af:08:d7:b8:6f:04:b5:da:c1:fb:18:9c:94:e4:14:7f:4b:ed:
7b:29:34:59:06:3b:f2:de:02:fa:b0:72:8d:91:4f:42:43:e9:
83:54:df:ce:fe:6b:66:75:07:9e:cc:13:42:88:9e:e0:f2:f6:
e1:58:73:73:29:67:3b:69:e1:5c:27:f0:55:a2:d7:d4:eb:35:
86:60:6c:6f:a9:af:8d:6c:85:72:6f:2a:6a:5b:a6:95:48:52:
07:f7:a7:59:ab:bf:44:cd:e4:43:fd:45:66:58:27:35:f0:1e:
98:24:e1:60:5d:17:62:2a:7f:5b:8d:c6:f7:7c:71:6e:89:1c:
e9:38:03:2e:3a:35:bc:90:d3:82:33:df:42:28:54:7a:7d:b6:
8d:5e:0c:52:1a:5b:46:3e:82:67:d5:bc:7d:82:31:0e:b9:21:
e7:85:15:88:46:6f:51:d3:ea:2c:5c:71:f8:f6:b9:0f:0c:97:
29:1e:79:f7:38:ea:de:ca:65:2d:92:b5:c5:be:be:47:f2:9a:
33:f7:c5:58:d6:f2:dd:8e:f0:2f:ea:cf:43:a0:cb:ce:36:e4:
e4:eb:32:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:20:27 2025 by rpki-client